Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
File:                     xj3vPkSJRRRCc6POcAST0qDFrZo.mft (raw, json)
Hash identifier:          uhDqhNMfUHVOfJULTNM1dr01EqQfcMZ3bbuZ5OqsHKs=
Subject key identifier:   6F:7B:63:F0:6C:45:94:1F:7A:BF:79:8D:59:EA:5D:66:5B:52:8E:FD
Authority key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
Certificate issuer:       /CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Certificate serial:       CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
Manifest number:          C9
Signing time:             Thu 01 May 2025 05:00:37 +0000
Manifest this update:     Thu 01 May 2025 05:00:36 +0000
Manifest next update:     Sat 03 May 2025 05:00:36 +0000
Files and hashes:         1: xj3vPkSJRRRCc6POcAST0qDFrZo.crl (hash: 1f/ryCCxu6ikY7JM9HWQBtMc09GgIztNwp4sbZ7tXfw=)
                          2: 70BD095E911A11EF82BB6497762E951A.roa (hash: 5fyS1GERhUUgdGRbwBe9ouhJvbIYLSd3rIAGNjMRUFs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640DFDAF, serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
        Validity
            Not Before: May  1 05:00:36 2025 GMT
            Not After : May  3 05:00:36 2025 GMT
        Subject: CN=6812fff5-5ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:60:81:e2:28:f4:21:1f:b7:25:5e:c3:6a:13:
                    17:9b:7a:38:4a:a9:a2:99:de:32:b6:7b:d6:96:a6:
                    fd:35:00:a8:e4:52:22:1c:a8:71:19:6e:97:1d:70:
                    a4:ee:5a:f9:15:73:25:15:d6:40:67:80:78:92:35:
                    b2:f2:39:d6:bf:ab:ac:e3:91:1e:65:8e:86:47:ef:
                    9d:91:35:4f:40:65:26:e8:f9:8a:f1:a3:39:5c:5e:
                    ca:05:76:4a:4f:55:32:25:5f:29:4d:02:77:c1:d5:
                    f6:23:97:37:90:a6:d0:03:f0:86:c6:62:8c:0d:3a:
                    b8:f8:90:ec:21:cf:76:ac:65:3c:34:aa:8d:29:3c:
                    61:e2:be:19:4b:cb:26:ba:ab:cb:89:d1:7d:ae:14:
                    78:3e:e8:06:54:c2:1a:0e:a9:d9:05:ef:22:a4:b5:
                    fc:87:ff:3f:3b:be:6d:81:6f:1e:bf:94:9b:5e:ff:
                    78:43:89:67:39:b4:e0:80:e3:c6:99:7a:cb:06:15:
                    93:7b:2b:f5:9c:ca:e9:2c:49:9c:41:6f:5a:f6:bf:
                    a5:fe:ad:5b:b2:0e:5c:29:77:7b:81:ed:4a:25:6e:
                    36:13:cc:dd:4e:2a:06:35:59:be:c9:d0:a7:98:ce:
                    1a:c8:7f:75:e2:b1:59:d3:73:16:36:c7:5e:3d:37:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7B:63:F0:6C:45:94:1F:7A:BF:79:8D:59:EA:5D:66:5B:52:8E:FD
            X509v3 Authority Key Identifier:
                keyid:C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:bd:7b:86:d4:50:d3:a6:9c:3e:ea:d5:9a:0b:63:6f:11:c4:
         8d:ab:1a:38:58:36:c4:7d:90:c7:e2:43:02:a7:e4:df:1e:51:
         e2:d1:f8:ff:92:e5:8d:a3:5f:31:20:9a:75:40:9e:66:12:ed:
         bf:00:86:10:df:24:0f:ae:78:2a:42:10:f4:14:79:80:9e:f0:
         1a:da:37:17:88:d0:ee:98:fe:24:9a:e5:53:b3:df:f1:5b:bf:
         36:db:44:62:bd:53:26:6e:d8:13:6d:11:4d:e4:f9:73:0c:4a:
         6a:27:0b:39:c8:bf:53:ce:1c:b6:a3:6a:2f:55:5c:37:47:ed:
         7f:b3:b3:44:88:1c:84:58:e3:96:6a:16:a9:bf:70:c6:4f:21:
         24:4f:d1:c5:d9:10:a4:5d:e4:8a:23:5e:e0:28:99:b0:53:b0:
         7e:48:a2:c6:1f:70:37:7e:de:41:a4:7a:63:08:48:a3:1d:25:
         3a:c4:30:7a:3a:3e:b3:73:f7:e3:8c:a6:ef:c4:83:d0:10:f2:
         0a:92:c3:2b:18:e9:42:34:9a:c5:75:6e:b7:38:10:25:3c:bd:
         ac:48:cd:47:6d:e5:39:34:77:a0:19:e0:98:43:32:8d:3a:af:
         9e:1c:9c:59:a5:42:e6:4e:63:37:c7:3d:36:87:6c:bc:01:63:
         84:6f:e0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:37:56 2025 by rpki-client